Windows Integrated keeps returning 1

[cowboy00242]

A strange one:

We have OWA set up on Ex2k, and use SSL for the website. Since we have Mac and UNIX users in the field, we only use Basic authentication for logging into/through OWA, as well as the subfolders. Typically, a user logs into the website first thing, and once that happens, OWA acts normally.

Sometimes, however, users are prompted twice for their login credentials. I've noticed that this happens when the subfolders of the website (.../Exchange, for example) demand Windows Integrated Authentication, as well as Basic. Simply removing Windows Integrated (unchecking the box) cures the problem.

But it returns at seemingly random intervals! We will get a call from a user (different users) up to 2 weeks later claiming a double login is required. I check the Internet Admin MMC and sure enough, Windows Integrated is once again chosen as the authentication method. No human hand (at least none have admitted) makes this change in the website security. This has happened 4 times now within the last 5 months.

Nothing in the logfiles of the machine seems to indicate a recurring event that makes this change, but SOMETHING has to make it switch. It's a real bother. When Windows Intgrated is suddenly set for the subfolders, Mac and UNIX users cannot get OWA to function correctly.

Any thoughts, anyone?

 

[isguyatlanta]

I have the same problem with the IIS setting changing back to integrated after a rebooting. But not just changing for the heck of it at any point in time.

OWA is the only site and we used the IIS lockdown tool (except the URL scan part). Also configured for SSL and to be the IM router.

 

[Xybertron]

You have to change it from Exchange System Manager...

It changes back via a process called DS2MB. Basically AD rights it back to the IIS metabase.

Go under the Server in ESM -> Protocols -> HTTP

You will see the directories. Change it there. Dan
Microsoft Exchange Support @ Microsoft